JP2001218272A - Terminal access system and communications equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a terminal access system where information, denoting whether a prescribed user can access can be managed in a unified manner by a service provided for each service class of a terminal, self-management can be realized with respect to the security and the access security of the terminal can be enhanced. SOLUTION: A communication opposite party remotely makes user verification with respect to a prescribed storage medium connected to a wireless terminal via a wireless channel in the case of wireless channel connection.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for varying the access level of a terminal according to a communication partner in a communication system.

[0002]

2. Description of the Related Art When the access level of a terminal is changed according to a communication partner, conventionally, as a method of confirming the communication partner, input information such as a password set for each service access level is input from the communication partner. A method of identifying a communication partner based on the input information is adopted.

[0003]

However, in the above conventional example, when a password is used, it is necessary for the accessor to disseminate the password for each access level, and the communication partner manages the password. There is a problem that the user cannot manage the password by himself.

According to the present invention, it is possible for a service provider to centrally manage information indicating whether or not a predetermined user is accessible for each service class in a terminal, thereby realizing self-management for security. It is an object of the present invention to provide a terminal access method capable of improving terminal access security.

[0005]

According to the present invention, when a wireless line is connected, a communication partner remotely performs user verification on a predetermined storage medium connected to the wireless terminal via the wireless line. Things.

[0006]

DESCRIPTION OF THE PREFERRED EMBODIMENTS [First Embodiment] As a first embodiment, an IMT2000 (Internet
ionical Mobile Telecommunicative
2 shows an example of a wideband CDMA (W-CDMA) mobile communication system that is a candidate for a system.

FIG. 1 shows a wideband CDMA (W-CDMA).
FIG. 1 is a configuration diagram showing a data terminal access system TA according to an embodiment of the present invention in a mobile communication system.

[0008] The data terminal access system TA includes a digital communication network 100 and a wireless communication service zone 1.
01, a communication carrier radio line controller 102, radio terminals 103 and 104, and SIM cards 105 and 106 which are removable storage media storing user's subscriber information.
, Data devices 107 and 108, data server 109
And

FIG. 3 shows the wireless terminal 10 in the above embodiment.
FIG. 3 is a functional block diagram showing a third example.

The wireless terminal 103 includes a wireless unit 31 for wireless transmission and reception, a baseband processing unit 32 for data modulation and demodulation, and a frame disassembly / assembly unit 33 for disassembling and assembling transmission / reception data according to a transmission / reception frame format.
, A communication application 34, a control unit 35, a SIM card 36 for storing various setting information, and a power supply unit (battery) 37 for terminal operation.

The configuration of the wireless terminal 104 is the same as the configuration of the wireless terminal 103.

FIG. 2 shows the wireless terminal 1 in the above embodiment.
12 is a sequence chart showing an operation of transmitting data from the 03 and 104 sides to the data server 109 side.

First, when a call operation (201) is performed via the wireless terminal body or the connected data devices 107 and 418, a communication between the wireless terminal and a wireless base station constituting a communication cell of the wireless carrier service zone 101 is performed. Then, the link (202) of the wireless line is set. Thereafter, an outgoing call is set (203) to the network constituted by the communication carrier radio network controller 102 and the digital communication network 100.

After completing the setting of the outgoing call (203), the network sets up the incoming call to the data server 109 (204). The data server accepting the incoming call setting (204) responds to the incoming call (205) and enters the communication state (206). Entered communication state (206)
Thereafter, the data server makes a request (207) for remote verification of the SIM card to the calling wireless terminal using the facility (terminal-to-terminal message).

[0015] The wireless terminal receiving the facility message sends an SI to the connected SIM card.
An M card folder verify request (208) is performed. The SIM card folder verify request is a request to confirm the owner of the SIM card.

Upon receiving the request, the SIM cards 105 and 106 internally return a SIM card folder verify response (209).

The wireless terminal that has received the verification response makes a SIM card verification response to the data server using the facility (terminal-terminal message) with the result of the remote verification of the SIM card as a parameter (210). ).

The data server determines the service class of the data server in the main line connection in accordance with the contents and status of the SIM card verification response.

FIG. 4 is a flowchart showing the processing operation of the data server 109 after the completion of the incoming call setting (incoming call response) in the above embodiment.

In response to the incoming call (205), the communication state (20)
After the transition to 6), a verification request of the SIM card is requested to the communication partner using the facility message (terminal-to-terminal message) of the digital network (40).
1).

After that, it waits for reception of a facility message (SIM card verify response) from the communication partner (402). When the response waiting timer times out without receiving the message (403), the access of the data server is limited to the basic function. That is, the service class in the terminal is restricted according to the result of the user verification. Then, one processing unit ends.

When the message is received, the contents of the SIM card folder verification (confirmation of the SIM card owner) are recognized according to the contents of the received message (40).
4) It is determined whether or not the communication partner is an all function access release user who is a user releasing access to all functions (405). If the communication partner is an all-function access release user, access to all functions is permitted (4).
06). Then, one processing unit ends.

On the other hand, if the communication partner is not the all function access release user (405), it is determined whether or not the communication partner is a function limited access permitted user who is permitted to access only the function limitation. Judge (40
7) If the communication partner is a limited function access permitted user, access to the limited function is permitted (408). If the communication partner is not a limited function access permitted user, access to only the basic function is limited (409). , One processing unit ends.

As described above, after setting up the communication line between the wireless terminal and the data server, the remote SIM card verification (confirmation of the SIM card owner) using the facility message is performed, so that only the data server side can be used. By this determination, access to the data server can be restricted for each communication partner.

[0025] Thus, for each service class in the terminal, information indicating whether or not a predetermined user is accessible can be centrally managed by the service provider, and self-management of security is realized. And the access security of the terminal can be improved.

[Second Embodiment] In the above embodiment, the IMT
(International Mobile Tel
communication 2000), which is a candidate for a wideband CDMA (W-CDMA) mobile communication system, but which can be connected to another SIM card (GSM, PDC, PHS, etc.) in a terminal access restriction system and the SIM card. Can be applied to a wired digital communication terminal.

According to this configuration, there is provided means for connecting a storage medium storing the subscriber information, call control is performed using the subscriber information, an inquiry is made to the connected storage medium, and In a communication system capable of restricting a service class of a terminal based on a result of user verification of a storage medium holder, a communication partner communicates with a storage medium connected to the communication terminal when a line is connected. Since the user verification is performed remotely via the line, the information on the user who can or cannot access the terminal for each service class can be centrally managed by the service provider (communication partner). Therefore, self-management of security can be realized, and access security of the terminal can be improved.

That is, in the above embodiment,
Verify the specified storage medium, such as a card, to confirm that the card, etc. is appropriate.If this confirmation is obtained, communication is permitted.
The card or the like can be used at any terminal.

That is, in the above embodiment,
The feature is that the storage medium is verified, so that instead of performing identity verification, the card is confirmed to be appropriate, and if this confirmation is obtained, communication is allowed. If there is, there is an advantage that any terminal can be used.

[0030]

According to the present invention, for each service class in a terminal, information indicating whether or not a predetermined user is accessible can be centrally managed by the service provider, and security can be improved. The self-management can be realized, and the access security of the terminal can be improved.

[Brief description of the drawings]

FIG. 1 is a configuration diagram showing a data terminal access system TA according to an embodiment of the present invention in a wideband CDMA (W-CDMA) mobile communication system.

FIG. 2 shows a wireless terminal 103, 104 in the above embodiment.
6 is a sequence chart showing an operation of transmitting a call from a server to a data server 109 side.

FIG. 3 is a functional block diagram showing a wireless terminal 103 in the embodiment.

FIG. 4 is a flowchart showing a processing operation of the data server 109 after completion of incoming call setting (incoming call response) in the embodiment.

[Explanation of symbols]

TA: data terminal access system, 100: digital communication network, 101: wireless communication carrier service zone, 102: communication carrier radio circuit controller, 103, 104: wireless terminal, 105, 106: user's subscriber information is stored. SIM card, which is a removable storage medium, 107, 108 ... data equipment, 109 ... data server.

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5J104 AA07 AA16 BA07 EA01 EA03 KA01 KA06 KA10 MA01 NA05 NA38 PA02 5K024 AA61 CC09 CC11 DD06 EE08 GG01 GG05 HH00 5K033 AA08 CB01 DA02 DA19 DB12 DB20 EA03 5K0A EE03 KK15

Claims (8)

[Claims] 1. A plurality of radio base stations are connected to a radio network controller via a wired communication network, a plurality of radio cells are formed by the plurality of radio base stations, and a service zone is formed by the plurality of radio cells. Formed, the wireless terminal and the wireless base station present in the service zone perform wireless connection, the wireless terminal has means for connecting a storage medium storing predetermined subscriber information, While performing call control using predetermined subscriber information, making an inquiry to the connected storage medium, performing user verification on the owner of the predetermined storage medium, and performing a user verification on the terminal in accordance with the result of the user verification. In a wireless communication system for limiting a service class, when a wireless line is connected, a wireless line is stored in the predetermined storage medium connected to the wireless terminal. Through, the communication partner, remote terminal access method characterized by having a storage medium verification means for performing the user verification. 2. The terminal access method according to claim 1, wherein the communication terminal receiving the incoming call activates the remote user verification process. 3. The terminal access method according to claim 1, wherein the communication terminal that has made the call activates the remote user verification process. 4. The communication terminal according to claim 1, wherein the communication terminal that has started the remote user verification process imposes a predetermined restriction on a service function according to a result of the verification process. A terminal access method characterized by the following. 5. The terminal access method according to claim 4, wherein, in the remote user verification process, if the communication partner does not respond, access to only a minimum basic service function is permitted. 6. The terminal access method according to claim 4, wherein in the remote user verification process, when the communication partner responds, access to a service function according to the information of the communication partner is permitted. . 7. A wired communication system in which a plurality of terminal devices are connected to a switching network via a wired communication network and a storage medium storing predetermined subscriber information is connected to the wired terminals. A terminal access method, characterized in that the communication partner has means for remotely performing user verification on the predetermined storage medium connected to the wired communication terminal via a communication line. 8. A communication device, comprising: a connection means for connecting a storage medium capable of storing predetermined subscriber information; and in response to a request from a communication partner, the communication partner establishes a connection between the communication partner and the communication device. A transmission unit for transmitting information for determining a service class relating to communication between the devices based on the information stored in the storage medium.